This course is for those wanting to learn basic to intermediate topics in Solaris 10 system administration.

Transcription

1 Course Summary Description This course teaches basic to intermediate topics in Solaris 10 system administration. The operating system will be Oracle Solaris 10 (SunOS 5.10 Release 1/13 U11). Objectives After taking this course, students will be able to: Understand how to use essential command line utilities Perform system boot and shutdown procedures on SPARC systems Administer the Service Management Facility (SMF) Manage Solaris file systems: UFS and ZFS Install the Solaris 10 Operating environment Install software packages Understand best practices installing OS patches Create and administer user accounts Connect a client system to a NIS server Understand file permissions Topics Understand security issues and system hardening techniques related to DISA STIG requirements Manage system processes Perform system backups and restorations Configure the network interfaces Configure and manage network services Convert a UFS boot drive to ZFS; mirror the boot drive using ZFS Backup and recover the ZFS boot disk Understand system logs and configuring syslog Troubleshooting hardware and OS errors Troubleshoot boot problems Mount remote NFS file systems Review of Essential Commands System Startup and Shutdown Procedures SPARC-Based Systems Service Management Facility (SMF) Managing Local Disk Devices Manage File Systems Introduction to the ZFS File System ZFS for the Boot Disk The Solaris Network Environment System Security Administering User Accounts Software Package Administration Managing Software Patches on Solaris 10 Manage System Processes Backup and Recovery Advanced Solaris 10 Procedures Solaris Live Upgrade Managing SWAP Space Managing Crash Dumps and Core Files Configure the NFS Environment Solaris 10 Name Services Configuring System Messaging Audience This course is for those wanting to learn basic to intermediate topics in Solaris 10 system administration. Prerequisites It is assumed that the student has an understanding of UNIX/Linux. You must be familiar with basic UNIX commands, and the VI editor. The Solaris fundamentals course or an equivalent UNIX SVR4 or Linux fundamentals course is recommended. Duration Five days

2 Course Outline I. Review of Essential Commands A. Understand the Solaris 10 Directory Hierarchy B. VI editor C. Managing files D. Understand Solaris 10 file types 1. Understand hard links and soft links 2. System Startup and Shutdown Procedures SPARC-Based Systems E. Basic network commands: sftp, scp F. List and kill active user processes II. III. System Startup and Shutdown Procedures SPARC-Based Systems A. Understand phases of the boot process SPARC B. Booting the system C. The Advanced Lights Out Manager (ALOM) and Integrated Lights Out Manager (ILOM) D. The Service Processor (SP) environment 1. Accessing the SP environment 2. Useful SP commands 3. Accessing the system console and the OpenBoot environment E. Understanding OpenBoot and programmable read-only memory (PROM) 1. OpenBoot Firmware tasks 2. PROM fundamentals 3. PROM commands and syntax 4. Understand how to view and set PROM parameters from (OpenBoot and the shell) 5. Understand how to view and set device aliases 6. OpenBoot security 7. OpenBoot diagnostics F. Boot PROM and program phases G. Stopping the system for recovery purposes (Interrupting an unresponsive system) H. Understand the pros and cons of the various shutdown procedures Service Management Facility (SMF) A. Describe features of the SMF and the phases of the boot process 1. The init process and the /etc/inittab file 2. svc.startd daemon (master starter/restarter) IV. B. Understand services and service instances C. Understand the SMF manifest 1. Creating the manifest D. Understand the SMF repository database 1. Modify the service configuration repository E. Understand the Fault Management Resource Identifier (FMRI) F. Understand service dependencies G. Identify run level fundamentals 1. Describe SMF Milestones 2. Changing milestones H. Compare run levels and SMF milestones 1. Understand when to use a SMF service vs. a legacy service 2. Identify phases of the boot process I. SMF command line administration utilities 1. Display information about services J. Starting and stopping services using SMF K. Starting services during boot L. Troubleshooting SMF problems M. Control boot processes and services N. SMF message logging O. Creating new service scripts 1. Convert a legacy service to a SMF managed service P. Legacy services 1. Administering the SMF 2. Troubleshooting SMF Q. Using run control scripts to stop / start legacy services 1. Adding scripts to the run control directories Managing Local Disk Devices A. Describe device naming conventions 1. Physical device name 2. Instance name 3. Logical device name 4. Block and character device files B. Disk labels: EFI GPT vs SMI VTOC C. Display disk configuration information D. Describe the format utility E. Perform disk partitioning using the format utility

3 V. Manage File Systems A. File system types used in Solaris Disk-based file systems: UFS and ZFS 2. Network-based file systems 3. Virtual file systems (SWAPFS, PROCFS, LOFS, CacheFS, DEVfs, TMPFS) B. Hardware vs. software RAID C. Identify and display information about file systems D. Creating a UFS file system E. File system operations F. Synchronizing a file system G. Repairing file systems H. Using fsck I. Mounting and unmounting file systems J. The /etc/vfstab file K. Displaying a file system s disk space usage L. Displaying directory size information VI. Introduction to the ZFS File System A. Introduction to ZFS 1. ZFS Terms 2. Hardware and Software requirements for ZFS 3. What is Self-Healing? B. ZFS RAID configurations C. Create a ZFS file system 1. Rename a ZFS file system 2. Listing a ZFS file system D. Remove a ZFS file system E. Remove a ZFS Storage Pool F. ZFS Components 1. Disks, Files, Virtual Devices 2. Naming convention G. Using disks in a ZFS storage pool H. Using files in a ZFS storage pool I. Mirrored storage pools 1. Converting a non-redundant pool to a mirrored pool 2. Detach a device from a mirrored pool 3. Split a mirrored storage pool J. RAID-Z storage pools K. Displaying ZFS storage pool information L. Adding devices to a ZFS storage pool M. Attaching and Detaching devices in a storage pool N. Taking storage pool devices offline and online O. ZFS history P. ZFS properties VII. 1. Native and settable properties 2. Setting ZFs properties Q. Mounting ZFS file systems R. Legacy mount points S. Sharing ZFS file systems T. ZFS Web-based management GUI U. ZFS snapshots 1. Creating snapshots 2. Listing snapshot information 3. Saving and Restoring a ZFS snapshot 4. Renaming a ZFS snapshot 5. Rolling back a ZFS snapshot 6. Save/Restore to a remote system V. ZFS Clones 1. Creating and destroying ZFS clones 2. Replacing a ZFS file system with a ZFS clone W. Zpool scrubbing X. Replacing Devices in a Storage Pool Y. Using ZFS with Solaris Zones 1. Adding a ZFS dataset to a nonglobal zone 2. Delegating a ZFS dataset to a nonglobal zone Z. Emulated volumes 1. Using ZFS as a swap or dump device AA. Designating hot spares in a storage pool ZFS for the Boot Disk A. ZFS on the boot drive (rpool) 1. Advantages of ZFS over UFS on the boot drive 2. Techniques to backup and restore the rpool 3. Convert a UFS boot disk to ZFS B. Mirror the boot disk (rpool) C. Migrate a UFS root disk to ZFS D. Booting a ZFS root file system E. ZFS related OpenBoot commands F. Multiple ZFS boot environments with Live Upgrade G. Booting a ZFS file system in FailSafe mode H. Replacing a disk in a ZFS root pool I. Boot From a Alternate Disk in a Mirrored ZFS Root Pool J. Root pool snapshots K. Recreate a ZFS Root Pool and Restore Root Pool Snapshots L. Roll Back Root Pool Snapshots

4 VIII. IX. The Solaris Network Environment A. The Solaris Client/Server model B. Network interfaces Network Hardware C. Configuring and Monitoring network interfaces D. Configuring static information E. Configuring dhcp F. Configuring the Network Interface G. /etc/hostname.interface H. /etc/nodename I. /etc/defaultdomain J. /etc/inet/hosts K. Configuring Network Services L. Enable and disable server processes using the Service Management Service (SMF) M. Understanding inetd and the inetd.conf file in the SMF environment N. Starting services on well-known ports O. Using inetadm P. Understand and monitor RPC services Q. Network Security Files R. Understand how to configure the secure shell (ssh) S. Network Maintenance and Troubleshooting System Security A. System hardening guidelines and meeting DISA STIG requirements B. Controlling root access C. User account information D. Restricted shells E. Controlling file access 1. umask 2. Sticky bit 3. Setting the correct PATH 4. setuid / setgid programs F. Auditing users 1. Monitoring users and system usage 2. Checking who s logged in 3. The whodo command 4. The last command G. Perform network hardening H. Securing superuser access I. Automated security enhancement tool (ASET) J. Securing services K. Understand the Secure by Default configuration X. Administering User Accounts A. Describe user administration fundamentals B. Adding, modifying, and deleting a user account from the command line and SMC 1. Adding a group from the command line and SMC 2. Setting up and customizing the user s shell C. Managing initialization files 1. The /home directory D. Authenticate using a Name service (NIS) E. Connect an NIS client to a NIS server XI. Software Package Administration A. Describe fundamentals of package administration B. Tools for managing software from the command line and from the system GUI tools 1. Adding and removing software packages 2. Listing and verifying installed packages XII. Managing Software Patches on Solaris 10 A. The fundamentals of patch administration B. Installing / verifying / removing a patch and patch clusters C. Introducing Sun Connection services 1. Using Sun connection services to automate patching 2. Using the update manager from the GUI and from the command line XIII. Manage System Processes A. Viewing system processes 1. Commands used to monitor system resources and processes 2. PROC tools B. Process types C. Using signals 1. The kill command D. Scheduling processes 1. The fair share scheduler (FSS) 2. Scheduling and changing process priorities 3. The nice and priocntl commands E. Clear frozen and zombie processes

5 XIV. XV. F. Using the Solaris batch-processing facility to schedule execution of commands 1. Configuring crontab for executing recurring processes 2. Using the at command for automatic one-time execution of a command Backup and Recovery A. Backup and recovery fundamentals B. Solaris backup and restoration utilities 1. Using the tar, dd, cpio, and pax utilites 2. Using ufsdump and ufsrestore C. Recovering the root (/) and /usr file system D. Backing up a mounted file system E. Creating a UFS snapshot F. Backing up the snapshot file G. Creating a Flash Archive H. Recover using a Flash Archive Advanced Solaris 10 Procedures A. Perform a Flash B. Describe a flash install C. Create a flash archive D. Create a differential flash archive E. Manipulate a flash archive F. Using a flash archive for cloning a server G. Using a flash archive for cloning a server disaster recovery H. Perform a JumpStart and PXE I. Overview J. Preparing a Custom Jumpstart K. Setting up the Server L. Setting up the Install Server M. Setting up the Boot Server N. The rules File O. Creating Profiles P. Using a Flash Archive for a JumpStart Q. Example Jumpstart R. Setup JumpStart to create a ZFS mirrored root pool S. Install the OS Using a Flash Archive T. Create a Flash Archive U. Create a differential Flash Archive V. WAN Boot W. The WAN boot process XVI. XVII. XVIII. XIX. X. Configure the WAN boot environment and the WAN boot server Y. Booting the WAN boot client Z. Using a Flash Archive for a WANboot Solaris Live Upgrade A. Understand the Solaris Live Upgrade Process (when and where to use it) B. Understand the Live Upgrade requirements C. Understand the Live Upgrade commands D. Create an alternate boot environment cloned from a running system E. Create a new boot environment F. Upgrade a boot environment G. Patch a boot environment H. Modify a boot environment I. Activate a new boot environment on the SPARC and x86 platforms J. Maintain the Solaris Live Upgrade boot environment K. Manage multiple boot environments L. Advantages of using Live Upgrade on a ZFS root environment M. OpenBoot commands and options when using multiple boot environments Managing SWAP Space A. Describe swap and virtual memory concepts B. Swap space and TMPFS C. Configure, size and monitor swap space D. Setup swap space E. Expand swap space Managing Crash Dumps and Core Files A. Understand Core dumps 1. Core dump configuration 2. Manage core file behavior B. Understand Crash Dumps 1. Crash dump configuration 2. Manage crash dump behavior Configure the NFS Environment A. Servers and Clients 1. NFSv4 B. NFS Daemons C. NFS Security 1. NFS logging D. Mounting a Remote File System

6 E. Troubleshooting NFS errors F. Describe the fundamentals of the AutoFS file system XX. XXI. Solaris 10 Name Services A. Describe the Name Service concept and why it is used B. Structure of the NIS Network 1. Server, slaves, and clients C. Planning your NIS Domain 1. Information to be Managed by NIS 2. Planning your NIS master server and slaves D. Configuring an NIS Master Server 1. Creating the source files 2. Preparing the Makefile 3. Creating custom NIS maps E. Setting Up the Master Server With ypinit F. Starting and Stopping NIS on the Master Server services G. Setting up NIS slave servers H. Setting up NIS clients I. The Name Service Switch 1. Templates 2. Name service sources 3. Name service status codes J. Local /etc files K. Troubleshooting NIS 1. Binding problems 2. Server problems L. DNS 1. Configuring a DNS client M. LDAP 1. Configure an LDAP client Configuring System Messaging A. Describe the fundamentals of the syslog function B. Using logger C. Important system log files D. Configure syslog messaging E. Monitoring Users and System Usage F. Monitoring logins G. Setup a central syslog server